← Database

CVE-2025-21049

MEDIUM CVSS: 5.5 Published: 2025-10-10 Modified: 2026-06-17

Description

Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.

Affected Platforms

Samsung Android

Weakness Type

NVD-CWE-noinfo

References